Access control policy simulation and testing

One or more non-transitory computer-readable storage media having collectively stored thereon instructions that, if executed by one or more processors of a system, cause the system to:

• identify a computing resource associated with a first access request;
• identify an access control policy associated with the computing resource and the first access request;
• generate a second access request that simulates access to the computing resource;
• process a result of the second access request and the access control policy to generate information associated with the access control policy;
• and
• provide the information in response to the first access request,
• wherein the information associated with the access control policy is debugging information associated with evaluating the request, and
• wherein the second access request includes an indication that one or more actions indicated by the first access request are not to be performed.

A system, comprising:

• one or more processors;
• and
• memory including instructions that, if executed by the one or more processors, cause the system to:
• identify a computing resource associated with a first access request;
• identify one or more access control policies associated with the computing resource and the first access request;
• generate a second access request that simulates access to the computing resource;
• evaluate a result of the second access request and the one or more access control policies;
• and
• generate information usable for debugging the evaluation of the first access request, the information indicating whether the first access request is authorized or denied and on a condition that the access request is denied, the information specifying one or more reasons the first access request is denied per the one or more access control policies,
• wherein the second access request includes an indication that one or more actions indicated by the first access request are not to be performed.